2 comments

[ 3.1 ms ] story [ 7.2 ms ] thread
TL;DR: SNI sends hostname (not whole URL) in plaintext, ESNI (encrypted) is not widely supported (not in Chrome, off by default in Firefox, visited domain also needs to support it).